One important item from the list is to use modsecurity , which is "an open source intrusion detection and prevention engine for web applications" that runs as an Apache module. The latest version, 1.9, was finalized and released on November 30. Are you running the latest version?